Shenandoah Valley Medical System, Inc.

Shenandoah Valley Medical System, Inc. d/b/a Shenandoah Community Health notified the Massachusetts Attorney General of a data breach affecting personal information, including that of minors. The organization has established a toll-free response line and is providing complimentary credit monitoring and fraud assistance services through Cyberscout to affected individuals. The specific nature of the breach, dates, and number of affected individuals are not detailed in the provided excerpt.

Aesto LLC d/b/a Aesto Health, a healthcare data migration and archiving service provider, experienced a network security incident impacting its AWS infrastructure. An unauthorized actor accessed and copied data between December 2 and December 18, 2025. Aesto detected the incident on December 18, 2025, and confirmed the scope on May 26, 2026. Affected data included PHI, names, SSNs, and financial account numbers for patients of Covered Entity clients, including Shenandoah Valley Medical System. Approximately 23 New Hampshire residents were notified via mail starting August 11, 2026. Aesto engaged forensic specialists, contained the incident, and offered credit monitoring.

Shenandoah Valley Medical System, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-08-11. The reporting organization type is Health Care. 7 Vermont residents were affected. Categories of data breached: Social Security Numbers.

Aesto LLC, on behalf of Shenandoah Valley Medical System, Inc. (d/b/a Shenandoah Community Health), issued a data breach notification in Nebraska. The incident involved the unauthorized access to minor's information, including government identifiers (SSN, DOB) and basic identity data. The organization provided free credit monitoring and fraud assistance via Cyberscout (TransUnion) and established a toll-free response line. The specific attack vector and discovery date are not detailed in the notification letter.